CVE-2017-7400 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-7400 Interim 1 15 2023-12-08T01:33:16Z current 2021-05-30T13:54:31Z 2023-12-08T01:33:16Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-7400 OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2017-May/002926.html E-Mail link for SUSE-SU-2017:1443-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Cloud 5 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 openstack-ceilometer-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-central-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-compute-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-ipmi-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-notification-7.0.4~a0~dev7-3.1 openstack-ceilometer-api-7.0.4~a0~dev7-3.1 openstack-ceilometer-collector-7.0.4~a0~dev7-3.1 openstack-ceilometer-doc-7.0.4~a0~dev7-3.2 openstack-ceilometer-polling-7.0.4~a0~dev7-3.1 openstack-cinder-9.1.5~a0~dev1-3.1 openstack-cinder-api-9.1.5~a0~dev1-3.1 openstack-cinder-backup-9.1.5~a0~dev1-3.1 openstack-cinder-doc-9.1.5~a0~dev1-3.1 openstack-cinder-scheduler-9.1.5~a0~dev1-3.1 openstack-cinder-volume-9.1.5~a0~dev1-3.1 openstack-dashboard openstack-dashboard-10.0.4~a0~dev2-3.1 openstack-glance-13.0.1~a0~dev6-3.1 openstack-glance-api-13.0.1~a0~dev6-3.1 openstack-glance-doc-13.0.1~a0~dev6-3.3 openstack-glance-glare-13.0.1~a0~dev6-3.1 openstack-glance-registry-13.0.1~a0~dev6-3.1 openstack-heat-7.0.4~a0~dev4-4.1 openstack-heat-api-7.0.4~a0~dev4-4.1 openstack-heat-api-cfn-7.0.4~a0~dev4-4.1 openstack-heat-api-cloudwatch-7.0.4~a0~dev4-4.1 openstack-heat-doc-7.0.4~a0~dev4-4.2 openstack-heat-engine-7.0.4~a0~dev4-4.1 openstack-heat-plugin-heat_docker-7.0.4~a0~dev4-4.1 openstack-heat-test-7.0.4~a0~dev4-4.1 openstack-keystone-10.0.2~a0~dev2-6.1 openstack-keystone-doc-10.0.2~a0~dev2-6.2 openstack-magnum-3.1.2~a0~dev22-13.1 openstack-magnum-api-3.1.2~a0~dev22-13.1 openstack-magnum-conductor-3.1.2~a0~dev22-13.1 openstack-magnum-doc-3.1.2~a0~dev22-13.1 openstack-manila-3.0.1~a0~dev27-3.1 openstack-manila-api-3.0.1~a0~dev27-3.1 openstack-manila-data-3.0.1~a0~dev27-3.1 openstack-manila-doc-3.0.1~a0~dev27-3.1 openstack-manila-scheduler-3.0.1~a0~dev27-3.1 openstack-manila-share-3.0.1~a0~dev27-3.1 openstack-nova-14.0.6~a0~dev16-3.1 openstack-nova-api-14.0.6~a0~dev16-3.1 openstack-nova-cells-14.0.6~a0~dev16-3.1 openstack-nova-cert-14.0.6~a0~dev16-3.1 openstack-nova-compute-14.0.6~a0~dev16-3.1 openstack-nova-conductor-14.0.6~a0~dev16-3.1 openstack-nova-console-14.0.6~a0~dev16-3.1 openstack-nova-consoleauth-14.0.6~a0~dev16-3.1 openstack-nova-doc-14.0.6~a0~dev16-3.3 openstack-nova-novncproxy-14.0.6~a0~dev16-3.1 openstack-nova-placement-api-14.0.6~a0~dev16-3.1 openstack-nova-scheduler-14.0.6~a0~dev16-3.1 openstack-nova-serialproxy-14.0.6~a0~dev16-3.1 openstack-nova-vncproxy-14.0.6~a0~dev16-3.1 python-ceilometer-7.0.4~a0~dev7-3.1 python-cinder-9.1.5~a0~dev1-3.1 python-glance-13.0.1~a0~dev6-3.1 python-heat-7.0.4~a0~dev4-4.1 python-horizon python-horizon-10.0.4~a0~dev2-3.1 python-keystone-10.0.2~a0~dev2-6.1 python-magnum-3.1.2~a0~dev22-13.1 python-manila-3.0.1~a0~dev27-3.1 python-nova-14.0.6~a0~dev16-3.1 openstack-ceilometer-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-central-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-compute-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-ipmi-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-notification-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-api-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-collector-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-doc-7.0.4~a0~dev7-3.2 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-polling-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-api-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-backup-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-doc-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-scheduler-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-volume-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-dashboard-10.0.4~a0~dev2-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-api-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-doc-13.0.1~a0~dev6-3.3 as a component of SUSE OpenStack Cloud 7 openstack-glance-glare-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-registry-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-api-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-api-cfn-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-api-cloudwatch-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-doc-7.0.4~a0~dev4-4.2 as a component of SUSE OpenStack Cloud 7 openstack-heat-engine-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-plugin-heat_docker-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-test-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-keystone-10.0.2~a0~dev2-6.1 as a component of SUSE OpenStack Cloud 7 openstack-keystone-doc-10.0.2~a0~dev2-6.2 as a component of SUSE OpenStack Cloud 7 openstack-magnum-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-magnum-api-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-magnum-conductor-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-magnum-doc-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-api-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-data-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-doc-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-scheduler-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-share-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-api-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-cells-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-cert-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-compute-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-conductor-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-console-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-consoleauth-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-doc-14.0.6~a0~dev16-3.3 as a component of SUSE OpenStack Cloud 7 openstack-nova-novncproxy-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-placement-api-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-scheduler-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-serialproxy-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-vncproxy-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 python-ceilometer-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 python-cinder-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 python-glance-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 python-heat-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 python-horizon-10.0.4~a0~dev2-3.1 as a component of SUSE OpenStack Cloud 7 python-keystone-10.0.2~a0~dev2-6.1 as a component of SUSE OpenStack Cloud 7 python-magnum-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 python-manila-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 python-nova-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-dashboard as a component of SUSE Cloud 5 openstack-dashboard as a component of SUSE OpenStack Cloud 6 python-horizon as a component of SUSE OpenStack Cloud 6 OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping. CVE-2017-7400 SUSE OpenStack Cloud 7:openstack-ceilometer-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-central-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-compute-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-ipmi-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-notification-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-api-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-collector-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-doc-7.0.4~a0~dev7-3.2 SUSE OpenStack Cloud 7:openstack-ceilometer-polling-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-cinder-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-api-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-backup-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-doc-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-scheduler-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-volume-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-dashboard-10.0.4~a0~dev2-3.1 SUSE OpenStack Cloud 7:openstack-glance-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-api-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-doc-13.0.1~a0~dev6-3.3 SUSE OpenStack Cloud 7:openstack-glance-glare-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-registry-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-heat-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-cfn-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-cloudwatch-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-doc-7.0.4~a0~dev4-4.2 SUSE OpenStack Cloud 7:openstack-heat-engine-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-plugin-heat_docker-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-test-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-keystone-10.0.2~a0~dev2-6.1 SUSE OpenStack Cloud 7:openstack-keystone-doc-10.0.2~a0~dev2-6.2 SUSE OpenStack Cloud 7:openstack-magnum-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-api-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-conductor-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-doc-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-manila-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-nova-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-api-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-console-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.6~a0~dev16-3.3 SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:python-ceilometer-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:python-cinder-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:python-glance-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:python-heat-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:python-horizon-10.0.4~a0~dev2-3.1 SUSE OpenStack Cloud 7:python-keystone-10.0.2~a0~dev2-6.1 SUSE OpenStack Cloud 7:python-magnum-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:python-manila-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:python-nova-14.0.6~a0~dev16-3.1 SUSE Cloud 5:openstack-dashboard SUSE OpenStack Cloud 6:openstack-dashboard SUSE OpenStack Cloud 6:python-horizon moderate 6 AV:N/AC:M/Au:S/C:P/I:P/A:P 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N